Access internal Owncloud Server from LAN and WAN with the same address

[hackel]

Many thanks for your answer.
I had and zyxel firewall before and I can access the ownlcoud via this URL from the internet and from the LAN.

https://xxxxxx.no-ip.org:44443/owncloud

Is this also possible with pfsense?

If you, can you please tell me how (step-by-step)

many many thanks for you answer.

Regards
hackel.

[hackel]

Hello all,

NAT is working.
I can reach the owncloud over port 44443 from internal network and the name (https://xxxxxx.no-ip.org:44443/owncloud/).

I added my local server IP in the DNS Resolver.

The only problem is, to reach the owncloud from the internet.
If have no idea, why it is not working.

I added the new screenshots from the NAT rule and firewall rule.
Hope someone find the mistake.

Thank you very much for your support!

Regards
hackel

[johnpoz]

And again your forwarding 44443 to 443??  Why are you doing this  That just makes your url difficult..  Why do you have a port forward on your lan interface?  To change the port from 44443 to 443??

Does your pfsense actually have a public IP on its wan, or is it behind nat?  Do a simple sniff on pfsense wan - and check with something like canyouseeme.org if the traffic to this 44443 port is getting there from the internet.

[hackel]

Hello Johnpoz,

thank you for your answer.
And again your forwarding 44443 to 443??  Why are you doing this  That just makes your url difficult.
I don't whats us ownlcoud on the standard port because of attacks.

That just makes your url difficult..
Thats not a problem for me.

Why do you have a port forward on your lan interface?  To change the port from 44443 to 443??
Correct, I will reach the Server internal as external with the same URL.

Does your pfsense actually have a public IP on its wan, or is it behind nat?
If you mean, If I use an dyndns service, YES.

Do a simple sniff on pfsense wan - and check with something like canyouseeme.org if the traffic to this 44443 port is getting there from the internet.
I tried the check for 44443 and it failed.
Something is still not working :-(

Thanks you for trying to help me!!!!!

Regards.
hackel

[johnpoz]

What IP does pfsense have on wan 10.x.x.x, 192.168.x.x, 172.16-31.x.x ?  Or something else - ie a real public IP?  If you have a private address on your wan then your behind a nat, and you have to foward that port on the device in front of pfsense to pfsense wan IP or pfsense can not forward what it doesn't get.

You need to SNIFF on you wan, and see if the packets get there – not just check to see if they show open..

So under diag, do a packet capture for that port..  Do you see it hit pfsense..  Clearly its not going to be open for me I have not listening on it or forwarding it, pfsense just drops it.. But you can see that the traffic got there and pfsense if setup to do something would.  If it never gets there - nothing pfsense can do.

[hackel]

I got an official IP on the WAN interface (62.157.140.xxx).

This is the result from the packet capture.

19:34:27.773089 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
19:34:28.771618 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
19:34:30.782082 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
19:34:34.792186 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0

Any idea?

Thanks for you answer.

[hackel]

Can anyone help me?  :-[

It would be very very nice.

[jahonix]

Make your owncloud instance listen on port 44443 directly to save on NAT translation. Way easier.

[biggsy]

Your WAN Port Forward shows destination "DMZ net".  It should be "WAN net" or, better still, "WAN address" - i.e., your public IP.

[johnpoz]

True your forward needs to be to your actual server running owncloud not a network.